ServiceNow Patches 3 Critical Code Injection Flaws Allowing Arbitrary Code Execution

ServiceNow released patches for three critical code injection vulnerabilities that could allow attackers to execute arbitrary code and access or tamper with data. The flaws affect the widely used enterprise platform, and exploitation could have significant downstream impact on customers. Patch deployment is urgent, though no active exploitation has been reported.